Gambling Sites Not on GamStop and Offshore Mobile Play

Gambling sites not on GamStop are those licensed outside Great Britain, usually in Curaçao, Anjouan, Malta or Kahnawake, and they are not bound by the scheme. A GamStop registration cannot reach them, so the exclusion holds on UK-licensed sites and does not hold there. They are legal to play on, and unprotected.

Sometimes the scheme is typed "gamestop", which is a slip for the same thing.

I have been reading licence registers for years, and the single most useful habit I have picked up is boring: open the certificate, click the seal, and see whether the domain in the record matches the domain on the screen. Offshore casinos live in a browser tab and, increasingly, in an app icon on a phone's home screen, and that last part is where the numbers get interesting. The Gambling Commission's own figures for June to September 2024 recorded 44.2 million withdrawals at large online operators, and 96.3 per cent of them cleared automatically. That is the benchmark. It was set by British-licensed firms operating under the LCCP, and it is the standard against which every offshore alternative should be judged — including the decent ones, which mostly match it, and the poor ones, which build delay into their terms and call it a processing window.

The market behind that benchmark is now worth real money. Total Great Britain gross gambling yield was £17.5 billion in the year to March 2026, and the remote casino, betting and bingo sector alone accounted for £8.3 billion. Only a sliver of activity goes offshore: the Commission's November 2026 analysis estimates 0.6 per cent of the whole population, including non-gamblers, engaged with an illegal gambling website in the past four weeks. H2 Gambling Capital puts the amount staked with illegal operators at £16.6 billion in 2025, up from about £5 billion in 2019, and says the share of gambling happening legally slipped from 97 per cent to 92 per cent over that period. Two estimates, two methods, one direction of travel. I would treat the second figure as a claim rather than a fact, but the drift is hard to argue with.

Where the two sides genuinely diverge is not the games. It is what happens when something goes wrong.

What "not on GamStop" Actually Means

A site is off the scheme for one reason: it does not hold a licence from the Gambling Commission, so it has no obligation to join. Since 31 March 2020 every operator with a British licence must take part in the national multi-operator self-exclusion scheme as a condition of that licence, and the requirement sits in the Commission's Licence Conditions and Codes of Practice at social responsibility code provision 3.5.5. Compliance is not optional and it is enforced: in April 2020 the Commission suspended the licences of two online operators for failing to integrate by the deadline.

An offshore operator, holding a licence in another jurisdiction, has made no such promise to a British regulator. Since April 2020 British-licensed operators must also check their entire customer base against the register at least every 24 hours, which blocks registered people from receiving direct marketing as well as from playing. Offshore, there is no register to check against. That offshore sites holding no Commission licence are not connected to the scheme is stated by trade and press sources rather than a primary regulator page, but it follows directly from GamStop's own terms of use — the obligations bind participating operators only, and a non-participant cannot be bound.

It is worth being precise about what self-exclusion does and does not do. Registering blocks play with British-licensed companies for six months, one year, five years, or five years with auto-renewal. Once registered, the exclusion cannot be cancelled during the chosen term, and it stays in place after that term ends until the person contacts GamStop to remove it. There is a further automatic seven-year self-exclusion period afterwards if the registration is not deactivated, during which operators are told the person was previously excluded. That is the arrangement, and offshore sites sit outside it. They are not a workaround; they are simply a different jurisdiction with a different rulebook, and one where the protections listed below do not apply.

The plain position, early and unhedged: a site without a Commission licence is not licensed in Great Britain, British gambling protections do not apply to it, and if something goes wrong the Commission cannot resolve the dispute — it is a regulator, not an ombudsman, and it does not recover money for individuals. Help is free and separate from all of this. The National Gambling Helpline, run by GamCare, is on 0808 8020 133, twenty-four hours a day, every day of the year, with callers in Wales given 0808 2819 265.

Five Signs an Offshore Operation Deserves Your Deposit

None of these proves a site is honest. Each one is cheap to run and quick to fail, which is the point.

The Licence Register Says What the Site Says

Open the regulator's public register and search the operator's name and the domain shown in the address bar. In Curaçao the Gaming Authority became the direct licensing and supervisory authority when the National Ordinance on Games of Chance took effect on 24 December 2024, replacing the old master-licence model. The four former master licensors stopped licensing on these dates: Gaming Curaçao on 18 August 2024, Curaçao eGaming on 1 October 2024, Antillephone on 1 November 2024, and Curaçao Interactive Licensing on 31 January 2025. The legacy orange sub-licence certificates of operation ended on 15 October 2025. A historic /JAZ number is therefore not independent proof of a current licence, and the CGA says so itself. In Kahnawake, the Commission's Logo Certificate Program generates a "Certificate of Good Standing" if a player clicks the logo on the site.

The Seal Leads Somewhere That Works

Click it. A Curaçao Certificate of Operation Seal must redirect to the CGA's certificate portal, and it is issued only for an approved, registered player-facing domain. If the seal differs in design, colour or format, or the certificate behind it names a different domain from the one being visited, you are looking at another operator's paperwork. Anjouan's certificates carry a unique licence number and a QR code linking to the public register, and the authority states that certificates which cannot be verified through that register should not be relied upon. A dead seal is a loud signal, not a technical glitch.

The Number Is Real and It Is Checkable

Anjouan's published fee schedule is EUR 17,828 for B2C licence issuance, one-time, and EUR 17,828 for annual renewal. Curaçao's application fee for a B2C licence is a non-refundable EUR 4,592, and the total annual B2C fee is EUR 47,450 — a EUR 24,490 licence fee to the National Treasury plus a EUR 22,960 supervisory fee to the CGA, payable in full by 15 January. Kahnawake's Client Provider Authorisation application fee rises from USD 35,000 to USD 40,000 on 1 January 2027. These are the costs of standing still in the market. A site quoting a licence with no register entry behind it is not a licensed site; it is a site with a picture of a licence.

The Terms Say Who Decides, and What It Costs

Read the withdrawal section before depositing, not after winning. Terms that give the operator sole discretion — "we may", "we reserve the right" — are the ones that matter. Terms that cap what can be withdrawn from a bonus, cap the maximum bet while wagering, or charge for a payout are the ones that decide how the evening ends. And check which alternative dispute resolution body the operator names. Anjouan requires licensees to designate an approved ADR provider and to list its name and contact details in player-facing terms, with complaints resolved within 30 days before escalation; the approved providers currently include EGIS ADR, Axion ADR, iGaming ADR and other licensees. If no ADR body is named, there is nowhere to go that costs the operator anything.

The App Installs From the Site, Not From the Store

This is the mobile test, and it is the one most people skip. A native app on the App Store or Google Play from a British-licensed operator carries the store's own compliance checks and can be pulled. An app installed from a banner on an offshore site, delivered as a downloaded package with a "trust this developer" prompt, carries nothing at all. It can request permissions a browser tab cannot, it survives when the website's domain is blocked or seized under a disruption notice, and it keeps its own copy of your account. If a site pushes a sideloaded app and cannot explain why the store version is missing, that is your answer.

Comparing Licences for Mobile Play

The table does not rank brands. It compares the licence regimes a "not on GamStop" casino is most likely to hold, on the things that decide whether a mobile session ends well.

Two rows deserve a sentence each. Costa Rica's Legislative Assembly rejected Bill No. 25,057 in early 2026, which would have introduced a mandatory licensing regime; the "data processing license" the industry sometimes cites is not a licence in the strict legal sense. And Kahnawake's rules are the harshest on this list in one respect: a player who breaches a self-exclusion prohibition forfeits funds deposited or won to a third-party charity chosen by the Commission.

The British column sets the standard, and the gap is not theoretical. Under Commission rules, un-staked deposits remain the customer's, un-staked balances cannot be confiscated for failing identity checks, account inactivity cannot be used to deduct from a deposit balance, and no maximum limit may be placed on what a customer withdraws from their deposit balance — the Commission's own example of a prohibited term is "you may withdraw up to £50 per day and up to £500 per week". None of that travels with a Curaçao seal.

Payout Delays and Design

The cluster asks whether the money actually arrives. Here is the honest answer: the mechanism is the same everywhere, and only the last step is outside the operator's hands.

There are three stages. The operator approves the withdrawal — that is the firm's decision, and a British-licensed firm is expected to make it promptly. Then the payment rail moves the money: Faster Payments settles the vast majority of transactions in under two seconds, Visa Direct's fast funds service can have funds available within 30 minutes of approval, and a Bitcoin transfer targets a block roughly every 10 minutes, with 96.3 per cent-style certainty only after a few blocks. Then, if the money goes back to a card or bank account, your bank posts it. Offshore, stage one has no deadline attached to it. The LCCP sets no fixed maximum number of days for an operator to complete a withdrawal; the British regime relies on the fair-and-open condition, the identity-verification condition and the prohibition on unfair terms instead of a stated payout deadline. If that is true of a firm with a British licence, a firm without one has still less to answer to.

The main offence is a term that makes the first withdrawal slow by design. British rules ban exactly this. Licence condition 17.1.1 requires that a request to withdraw must not trigger a demand for additional information the licensee could reasonably have requested earlier, and a 2026 Commission blog reported that over a quarter of complaints reaching its Contact Centre concern identity verification, raised when documents are asked for only at withdrawal. Reverse withdrawals have been prohibited since 31 October 2021 under RTS 14B. In October 2026 the Commission announced that one operator would pay £900,000 in a regulatory settlement for failures including unnecessarily delaying consumer withdrawals — one term stated that customers could request only one withdrawal at a time and could not request another until the original was authorised, and was found unfair under the Consumer Rights Act 2015.

Offshore, the equivalent clauses survive. On the wagering side alone: one operator's published terms apply a 25× playthrough requirement and weight slots at 100 per cent but craps and live dealer games at 0 per cent; another caps the maximum bet while wagering at €5 and rejects any bet above it. Trade comparisons put offshore welcome offers typically at 25× to 40× and some guide tables at 35× to 50×. Since 19 January 2026, British-licensed operators cannot apply wagering requirements above ten times, and mixed-product promotions are banned outright.

Delay also arrives from a direction players rarely anticipate. Under anti-money-laundering rules a firm that suspects money laundering must file a suspicious activity report and obtain a defence before returning funds, and the Commission has acknowledged that this can necessitate a delay in payouts — while stating it does not give operators a right to confiscate deposits. The test is not whether a delay can be explained. It is whether the explanation was written down before you deposited.

Why an Identity Check Can Hold Your Money

Identity verification is the single thing this topic turns on, because it is the most common reason a withdrawal stalls and the most common reason a complaint is made.

The first time, in the British system, the rules have moved towards getting it over with early. Licence condition 17, introduced on 7 May 2019, requires a licensee to obtain and verify information establishing identity before the customer is permitted to gamble, and that information must include name, address and date of birth. Before a customer is allowed to deposit, the operator should tell them what documents or information may be needed, in what circumstances and in what form. Often nothing is uploaded at all: companies can verify against credit reference agencies and the electoral roll, in which case no documents are requested. Where documents are needed, passports, driving licences and household bills are the usual examples, and the Commission states plainly that it cannot give a timescale for ID checks because the process varies — instant if electronic verification succeeds, longer if paperwork is requested.

Later, the checks change character. Under the money laundering regulations, a remote casino must identify and verify when a customer deposits, or withdraws funds or winnings, amounting to €2,000 or more, and the threshold applies both to a single transaction and to transactions that appear to be linked — for example, part of the customer's overall activity during one logged-on period. Financial vulnerability checks became a licensing requirement in August 2024 at £500 net deposits over a rolling 30 days, lowered to £150 from 28 February 2025. The Commission announced on 7 July 2026 that Financial Risk Assessments will arrive in stages, starting with the largest operators at £5,000 net deposits in a rolling 24 hours for customers aged 25 and over and £2,500 for under-25s, and finishing at £1,000 in 24 hours or £3,000 over 90 days. Fewer than 0.5 per cent of customers exceed the first-stage threshold, and the Commission has said no enforcement action will follow a failure to act during the early stages.

Warning signs, in order of how often I see them:

• Documents requested for the first time at the withdrawal screen. That is the pattern the regulator has specifically criticised, and it is far more common offshore.
• A "verification department" with no named ADR body and no published complaints route.
• A cap on what can be withdrawn from bonus winnings, or a maximum bet while wagering low enough to catch ordinary play.
• Terms reserving sole discretion to void winnings. The Commission's view is that such terms are unfair within the meaning of the Consumer Rights Act 2015, and one UK firm was fined £170,000 in July 2025 for, among other failures, a bonus term allowing it to close accounts or forfeit winnings at its own discretion.
• A payment method that no British-licensed operator could accept. Licence condition 5.1.2, effective 31 January 2024, requires payments from Great Britain customers to be taken by a provider that is a payment service provider under the Payment Services Regulations 2017. Credit cards have been banned for gambling since 14 April 2020.

A Phone-First Checklist Before the First Deposit

Six steps, in this order. Each one exists because of a specific way the evening can go wrong on a small screen.

1. Check the licence on the regulator's own register, on the phone. Open the register in a second tab and search the operator name and the exact domain. Reason: the site's own licence page is marketing, and a digital seal can be copied in an afternoon.
2. Click the seal and read the certificate. Confirm the redirect works and the domain on the certificate matches the address bar. Reason: a certificate issued for a different domain is the clearest available sign that the operator's paperwork does not cover the site you are using.
3. Set a deposit limit before the first deposit, not after. British-licensed operators must prompt for a financial limit before the first deposit under rules effective 31 October 2025, with setting one as the default. Reason: a limit set in a calm moment is worth more than one set after a losing run, and offshore sites rarely prompt at all.
4. Read the withdrawal section and the bonus terms, on the screen you will actually use. Look for caps on bonus withdrawals, maximum bets while wagering and any fee for payouts. Reason: these clauses are what turn a win into a complaint, and they are easy to miss in a mobile layout.
5. Name the dispute route before you need it. Find the ADR provider or adjudication service in the terms and save it. Reason: once a dispute starts, an operator with no named route can stall indefinitely, and a regulator abroad will not take up an individual case.
6. Put the blocking software on first if the exclusion matters. GamStop signposts Gamban and BetBlocker. BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps and is free worldwide; Gamban blocks licensed and unlicensed sites, is free for residents of Wales, and costs £4.99 a month or £29.99 a year in England and Scotland after a 7-day trial, following the end of TalkBanStop funding on 31 March 2026. Bank gambling blocks are the other layer: most banks apply a 48-hour or 72-hour cooling-off period before gambling transactions are allowed again, blocks are set at card level, and they do not affect a credit score. Reason: an offshore site will not check a self-exclusion register for you, so the block has to sit on the device or the card.

One more thing worth knowing before the money moves: customer funds rules. British-licensed operators must keep customer funds in a separate client account and must disclose which of three insolvency protection ratings applies — "not protected", "medium protection" or "high protection" — on the first deposit and after any change to the terms. An operator rated "not protected" must remind the customer every six months. Money staked in an open bet is not customer funds and is not covered by any of it, and gambling businesses are legally allowed to hold customer money in overseas accounts. Separate client account, in other words, does not mean you get your money back if the operator fails.

Questions About Gambling Sites Not on GamStop

What gambling sites are not on GamStop?

Any operator without a British Gambling Commission licence. That covers the Curaçao, Anjouan, Kahnawake and Costa Rican registers, and it changes week by week as licences are issued and lapsed. The Commission's dashboard recorded 586 illegal gambling websites accessible to British consumers in September 2026, 4 per cent more than a year earlier, though a site can be unlicensed and still legal to play on if it holds a valid foreign licence.

Are gambling sites not on GamStop legal in the UK?

Using them is not the offence. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and it applies to remote gambling whether the operator is inside or outside the UK. The Commission states it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence, and that this includes an operator holding a licence elsewhere. The penalties fall on the operator, not on the player.

What is the best gambling site not on GamStop?

I will not answer that with a brand, and I would distrust any page that does. The judgement is structural: a licence you can verify on the regulator's own register, a named dispute resolution body, terms that do not cap bonus withdrawals, and an app that comes from a store rather than a sideloaded package. A site that passes those four tests is worth considering. One that fails two of them is not.

How long do offshore casinos take to pay out?

It depends on stage one, which is the operator's own approval and has no fixed legal deadline offshore. After that, payment rails are quick: Faster Payments settles over 90 per cent of transactions in under two seconds and Visa Direct funds can arrive within 30 minutes of approval, though individual banks set lower per-payment limits than the £1 million scheme ceiling. The British benchmark remains 96.3 per cent of withdrawals clearing automatically.

Do offshore sites offer better bonuses than UK ones?

Often larger headline figures, usually with more attached. Offshore welcome offers are commonly reported at 25× to 40× playthrough, and guide tables put them at 35× to 50×. Since 19 January 2026 British-licensed operators cannot exceed ten times, and mixed-product promotions are banned. A larger bonus with a 40× requirement and a maximum cashout clause is a smaller bonus with extra steps.

Does self-exclusion still apply if I use an offshore site?

No. A GamStop registration blocks play with British-licensed operators only, because participation is a licence condition for them and cannot be imposed on firms without one. The exclusion holds for its full term and then stays in place until the person contacts GamStop to remove it. An offshore site sits outside that arrangement entirely. For a device-level barrier, Gamban and BetBlocker are the ones GamStop signposts.

Understanding Sites Outside the Scheme

There is nothing illegal about playing on a well-run offshore site, and nothing safe about assuming it is well run. The British standard is the one to measure against — 96.3 per cent of withdrawals clearing automatically — and the protections that produced it, from the client account rule to the ban on reverse withdrawals, stay behind when you cross the line. Check the licence on the register, click the seal, read the withdrawal clause, name the dispute route, and put the block on the device rather than trusting the site to remember. The National Gambling Helpline is 0808 8020 133, free and open twenty-four hours a day, and in Wales 0808 2819 265.

The Commission's own market analysis puts engagement with illegal gambling websites at 0.6 per cent of the population in the previous four weeks. The number is small, which is exactly why it is easy to be one of them by accident.